EXPOSURES › CVE-2026-85706
CVE-2026-85706
HIGH ⌖ ON CISA KEV · EXPLOITEDGitLab Community and Enterprise Editions suffered a path traversal vulnerability allowing unauthenticated users to read arbitrary files via the repository commits API.
An unauthenticated attacker could read arbitrary files on GitLab instances due to improper path confinement and missing authentication enforcement in the commits API. This exposes sensitive data and violates CMMC/NIST 800-171 requirements for access control and data protection. DIBs must ensure their GitLab deployments are patched and monitor for similar unauthenticated data exfiltration vectors.
Shame score — A path traversal flaw allowing unauthenticated file reads is a negligent, avoidable failure that directly threatens data confidentiality and violates core security controls.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.